dd-trace 5.97.0 → 5.98.0

package/packages/datadog-plugin-cypress/src/cypress-plugin.js

@@ -1,5 +1,9 @@
 'use strict'
 
+// Capture real timers at module load, before any test can install fake timers.
+const { performance } = require('perf_hooks')
+const dateNow = Date.now
+
 const {
   TEST_STATUS,
   TEST_IS_RUM_ACTIVE,
@@ -53,6 +57,7 @@ const {
   DYNAMIC_NAME_RE,
   logDynamicNamesWarning,
   getPullRequestBaseBranch,
+  TEST_FINAL_STATUS,
 } = require('../../dd-trace/src/plugins/util/test')
 const { isMarkedAsUnskippable } = require('../../datadog-plugin-jest/src/util')
 const { ORIGIN_KEY, COMPONENT } = require('../../dd-trace/src/constants')
@@ -240,6 +245,58 @@ function getSuiteStatus (suiteStats) {
   return 'pass'
 }
 
+const FINAL_STATUS_RETRY_KIND = {
+  none: 'none',
+  atr: 'atr',
+  efd: 'efd',
+  atf: 'atf',
+}
+
+function getFinalStatusRetryKind ({ finishedTest, finishedTestAttempts, flakyTestRetriesCount }) {
+  // Infer retry kind from the executions we actually saw so ATR enabled with
+  // a retry count of 0 is still treated as a single final execution.
+  if (finishedTest.isAttemptToFix) {
+    return FINAL_STATUS_RETRY_KIND.atf
+  }
+
+  if (finishedTestAttempts.some(testAttempt => testAttempt.isEfdRetry)) {
+    return FINAL_STATUS_RETRY_KIND.efd
+  }
+
+  if (finishedTestAttempts.length > 1 && flakyTestRetriesCount > 0) {
+    return FINAL_STATUS_RETRY_KIND.atr
+  }
+
+  return FINAL_STATUS_RETRY_KIND.none
+}
+
+function getFinalStatus ({
+  status,
+  retryKind,
+  hasFailedAllRetries,
+  hasPassedAllAtfRetries,
+  isQuarantined,
+  isDisabled,
+}) {
+  // If the test is quarantined or disabled, regardless of its actual execution result or active retry features,
+  // the final status of its last execution should be reported as 'skip'.
+  if (isQuarantined || isDisabled || status === 'skip') {
+    return 'skip'
+  }
+
+  switch (retryKind) {
+    case FINAL_STATUS_RETRY_KIND.atr:
+    case FINAL_STATUS_RETRY_KIND.efd:
+      // These modes report the aggregate result across attempts.
+      return hasFailedAllRetries ? 'fail' : 'pass'
+    case FINAL_STATUS_RETRY_KIND.atf:
+      // Attempt-to-fix only passes if every execution passed.
+      return hasPassedAllAtfRetries ? 'pass' : 'fail'
+    default:
+      return status
+  }
+}
+
 class CypressPlugin {
   _isInit = false
   testEnvironmentMetadata = getTestEnvironmentMetadata(TEST_FRAMEWORK_NAME)
@@ -349,6 +406,19 @@ class CypressPlugin {
     this.rumFlushWaitMillis = undefined
     this._pendingRequestErrorTags = []
     this.libraryConfigurationPromise = undefined
+    this._timeOrigin = 0
+    this._perfOrigin = 0
+  }
+
+  /**
+   * Returns the current time in the same coordinate system used by span
+   * start/finish. Captured at session span creation so it shares the same
+   * epoch as the trace without reaching into span internals.
+   *
+   * @returns {number}
+   */
+  _now () {
+    return this._timeOrigin + performance.now() - this._perfOrigin
   }
 
   // Init function returns a promise that resolves with the Cypress configuration
@@ -665,6 +735,13 @@ class CypressPlugin {
       this.tracer._tracer._exporter.addMetadataTags(metadataTags)
     }
 
+    // Capture time references that match what startSpan records internally
+    // (trace.startTime = Date.now(), trace.ticks = performance.now()).
+    // This lets _now() produce values in the same coordinate system as
+    // span._startTime without accessing span internals.
+    this._timeOrigin = dateNow()
+    this._perfOrigin = performance.now()
+
     this.testSessionSpan = this.tracer.startSpan(`${TEST_FRAMEWORK_NAME}.test_session`, {
       childOf,
       tags: {
@@ -797,6 +874,7 @@ class CypressPlugin {
         : spec.relative
 
       const skippedTestSpan = this.getTestSpan({ testName: cypressTestName, testSuite: spec.relative, testSourceFile })
+      skippedTestSpan.setTag(TEST_FINAL_STATUS, 'skip')
 
       skippedTestSpan.setTag(TEST_STATUS, 'skip')
       if (isSkippedByItr) {
@@ -886,6 +964,36 @@ class CypressPlugin {
           finishedTest.testSpan.setTag(TEST_CODE_OWNERS, codeOwners)
         }
 
+        // We can check if this is the last attempt regardless of the retry mechanism
+        const isLastAttempt = attemptIndex === finishedTestAttempts.length - 1
+        if (isLastAttempt) {
+          const testSpanTags = finishedTest.testSpan.context()._tags
+          const retryKind = getFinalStatusRetryKind({
+            finishedTest,
+            finishedTestAttempts,
+            flakyTestRetriesCount: this.flakyTestRetriesCount,
+          })
+
+          const hasFailedAllRetries = testSpanTags[TEST_HAS_FAILED_ALL_RETRIES] === 'true'
+          const hasPassedAllAtfRetries =
+            testSpanTags[TEST_MANAGEMENT_ATTEMPT_TO_FIX_PASSED] === 'true'
+          const isQuarantined = testSpanTags[TEST_MANAGEMENT_IS_QUARANTINED] === 'true'
+          const isDisabled = testSpanTags[TEST_MANAGEMENT_IS_DISABLED] === 'true'
+
+          const finalStatus = getFinalStatus({
+            status: cypressTestStatus,
+            retryKind,
+            hasFailedAllRetries,
+            hasPassedAllAtfRetries,
+            isQuarantined,
+            isDisabled,
+          })
+
+          if (finalStatus) {
+            finishedTest.testSpan.setTag(TEST_FINAL_STATUS, finalStatus)
+          }
+        }
+
         finishedTest.testSpan.finish(finishedTest.finishTime)
       }
     }
@@ -1103,7 +1211,7 @@ class CypressPlugin {
         const finishedTest = {
           testName,
           testStatus,
-          finishTime: this.activeTestSpan._getTime(), // we store the finish time here
+          finishTime: this._now(),
           testSpan: this.activeTestSpan,
           isEfdRetry,
           isAttemptToFix,

package/packages/datadog-plugin-cypress/src/index.js

@@ -1,11 +1,68 @@
 'use strict'
 
+const NoopTracer = require('../../dd-trace/src/noop/tracer')
 const Plugin = require('../../dd-trace/src/plugins/plugin')
 
-// Cypress plugin does not patch any library. This is just a placeholder to
-// follow the structure of the plugins
+/**
+ * Cypress plugin handles setup-node-events from the instrumentation layer
+ * via a diagnostic channel, keeping the instrumentation free of tracer references.
+ */
 class CypressPlugin extends Plugin {
   static id = 'cypress'
+
+  constructor (...args) {
+    super(...args)
+
+    this.addSub('ci:cypress:setup-node-events', (payload) => {
+      // Bail out if the tracer failed to init (e.g. invalid DD_SITE).
+      // Mirrors the guard in the manual plugin entrypoint (plugin.js).
+      if (this._tracer._tracer instanceof NoopTracer) return
+
+      const { on, config, userAfterSpecHandlers, userAfterRunHandlers, cleanupWrapper } = payload
+
+      const registerAfterRunWithCleanup = (afterRunHandler) => {
+        on('after:run', (results) => {
+          const chain = userAfterRunHandlers.reduce(
+            (p, h) => p.then(() => h(results)),
+            Promise.resolve()
+          )
+          if (afterRunHandler) {
+            return chain.then(() => afterRunHandler(results)).finally(cleanupWrapper)
+          }
+          return chain.finally(cleanupWrapper)
+        })
+      }
+
+      const cypressPlugin = require('./cypress-plugin')
+
+      if (cypressPlugin._isInit) {
+        // Already initialized by manual plugin call — just chain user handlers
+        for (const h of userAfterSpecHandlers) on('after:spec', h)
+        registerAfterRunWithCleanup()
+        payload.registered = true
+        return
+      }
+
+      on('before:run', cypressPlugin.beforeRun.bind(cypressPlugin))
+
+      on('after:spec', (spec, results) => {
+        const chain = userAfterSpecHandlers.reduce(
+          (p, h) => p.then(() => h(spec, results)),
+          Promise.resolve()
+        )
+        return chain.then(() => cypressPlugin.afterSpec(spec, results))
+      })
+
+      registerAfterRunWithCleanup((results) => cypressPlugin.afterRun(results))
+
+      on('task', cypressPlugin.getTasks())
+
+      payload.registered = true
+      // cypressPlugin.init expects the proxy tracer (with ._tracer._exporter),
+      // not the unwrapped internal tracer that this.tracer returns.
+      payload.configPromise = Promise.resolve(cypressPlugin.init(this._tracer, config)).then(() => config)
+    })
+  }
 }
 
 module.exports = CypressPlugin

package/packages/datadog-plugin-fs/src/index.js

@@ -11,7 +11,7 @@ class FsPlugin extends TracingPlugin {
   }
 
   bindStart (ctx) {
-    if (!this.activeSpan) return this.skip()
+    if (!this.activeSpan) return { noop: true }
 
     const { operation, ...params } = ctx
     const lowerOp = operation.toLowerCase()

package/packages/datadog-plugin-google-cloud-pubsub/src/consumer.js

@@ -123,7 +123,8 @@ class GoogleCloudPubsubConsumerPlugin extends ConsumerPlugin {
     const topicName = topic?.slice(topic.lastIndexOf('/') + 1) ??
       subscription.name.slice(subscription.name.lastIndexOf('/') + 1)
     const baseService = this.tracer._service || 'unknown'
-    const serviceName = this.config.service || `${baseService}-pubsub`
+    const serviceName = this.config.service || { name: `${baseService}-pubsub`, source: baseService }
+
     const meta = {
       'gcloud.project_id': subscription.pubsub.projectId,
       'pubsub.topic': topic,

package/packages/datadog-plugin-google-cloud-pubsub/src/pubsub-push-subscription.js

@@ -145,17 +145,12 @@ class GoogleCloudPubsubPushSubscriptionPlugin extends TracingPlugin {
     const subscriptionName = subscription?.slice(subscription.lastIndexOf('/') + 1) ?? subscription
     const publishStartTime = attrs['x-dd-publish-start-time']
     const startTime = publishStartTime ? Number.parseInt(publishStartTime, 10) : undefined
-
-    // Get the base service name and construct the pubsub service override
-    const baseService = this.tracer._service
-    const serviceOverride = this.config.service ?? `${baseService}-pubsub`
-
     // Use this.startSpan() which automatically activates the span
     const span = this.startSpan('pubsub.push.receive', {
       childOf: parentContext,
       startTime,
       kind: 'consumer',
-      service: serviceOverride,
+      service: this.config.service || { name: `${this.tracer._service}-pubsub`, source: this.tracer._service },
       meta: {
         component: 'google-cloud-pubsub',
         'pubsub.method': 'receive',
@@ -163,7 +158,7 @@ class GoogleCloudPubsubPushSubscriptionPlugin extends TracingPlugin {
         'pubsub.message_id': message.messageId,
         'pubsub.subscription_type': 'push',
         'pubsub.topic': topicName,
-        '_dd.base_service': baseService,
+        '_dd.base_service': this.tracer._service,
         '_dd.serviceoverride.type': 'integration',
         'resource.name': `Push Subscription ${subscriptionName}`,
       },

package/packages/datadog-plugin-http/src/client.js

@@ -40,10 +40,10 @@ class HttpClientPlugin extends ClientPlugin {
     const span = this.startSpan(this.operationName(), {
       childOf,
       integrationName: this.constructor.id,
+      service: this.serviceName({ pluginConfig: this.config, sessionDetails: extractSessionDetails(options) }),
       meta: {
         [COMPONENT]: this.constructor.id,
         'span.kind': 'client',
-        'service.name': this.serviceName({ pluginConfig: this.config, sessionDetails: extractSessionDetails(options) }),
         'resource.name': method,
         'span.type': 'http',
         'http.method': method,

package/packages/datadog-plugin-http/src/server.js

@@ -4,7 +4,7 @@ const ServerPlugin = require('../../dd-trace/src/plugins/server')
 const { storage } = require('../../datadog-core')
 const web = require('../../dd-trace/src/plugins/util/web')
 const { incomingHttpRequestStart, incomingHttpRequestEnd } = require('../../dd-trace/src/appsec/channels')
-const { COMPONENT } = require('../../dd-trace/src/constants')
+const { COMPONENT, SVC_SRC_KEY } = require('../../dd-trace/src/constants')
 
 class HttpServerPlugin extends ServerPlugin {
   static id = 'http'
@@ -18,16 +18,24 @@ class HttpServerPlugin extends ServerPlugin {
 
   start ({ req, res, abortController }) {
     let store = storage('legacy').getStore()
+    const { name: schemaServiceName, source: schemaServiceSource } = this.serviceName()
+    const service = this.config.service || schemaServiceName
+    const serviceSource = (this.config.service && service !== this.tracer._service)
+      ? 'opt.plugin'
+      : (service === this.tracer._service ? undefined : schemaServiceSource)
     const span = web.startSpan(
       this.tracer,
       {
         ...this.config,
-        service: this.config.service || this.serviceName(),
+        service,
       },
       req,
       res,
       this.operationName()
     )
+    if (serviceSource !== undefined) {
+      span.setTag(SVC_SRC_KEY, serviceSource)
+    }
     span.setTag(COMPONENT, this.constructor.id)
     span._integrationName = this.constructor.id
 

package/packages/datadog-plugin-http2/src/client.js

@@ -41,10 +41,10 @@ class Http2ClientPlugin extends ClientPlugin {
     const span = this.startSpan(this.operationName(), {
       childOf,
       integrationName: this.constructor.id,
+      service: this.serviceName({ pluginConfig: this.config, sessionDetails }),
       meta: {
         [COMPONENT]: this.constructor.id,
         [SPAN_KIND]: CLIENT,
-        'service.name': this.serviceName({ pluginConfig: this.config, sessionDetails }),
         'resource.name': method,
         'span.type': 'http',
         'http.method': method,

package/packages/datadog-plugin-http2/src/server.js

@@ -4,7 +4,7 @@
 
 const ServerPlugin = require('../../dd-trace/src/plugins/server')
 const web = require('../../dd-trace/src/plugins/util/web')
-const { COMPONENT } = require('../../dd-trace/src/constants')
+const { COMPONENT, SVC_SRC_KEY } = require('../../dd-trace/src/constants')
 
 class Http2ServerPlugin extends ServerPlugin {
   constructor (tracer, config) {
@@ -19,17 +19,25 @@ class Http2ServerPlugin extends ServerPlugin {
   bindStart (ctx) {
     const { req, res } = ctx
 
+    const { name: schemaServiceName, source: schemaServiceSource } = this.serviceName()
+    const service = this.config.service || schemaServiceName
+    const serviceSource = (this.config.service && service !== this.tracer._service)
+      ? 'opt.plugin'
+      : (service === this.tracer._service ? undefined : schemaServiceSource)
     const span = web.startSpan(
       this.tracer,
       {
         ...this.config,
-        service: this.config.service || this.serviceName(),
+        service,
       },
       req,
       res,
       this.operationName(),
       ctx
     )
+    if (serviceSource !== undefined) {
+      span.setTag(SVC_SRC_KEY, serviceSource)
+    }
 
     span.setTag(COMPONENT, this.constructor.id)
     span._integrationName = this.constructor.id

package/packages/datadog-plugin-mongodb-core/src/index.js

@@ -35,9 +35,9 @@ class MongodbCorePlugin extends DatabasePlugin {
     }
     const query = getQuery(ops)
     const resource = truncate(getResource(this, ns, query, name))
-    const service = this.serviceName({ pluginConfig: this.config })
+    const serviceResult = this.serviceName({ pluginConfig: this.config })
     const span = this.startSpan(this.operationName(), {
-      service,
+      service: serviceResult,
       resource,
       type: 'mongodb',
       kind: 'client',
@@ -49,7 +49,7 @@ class MongodbCorePlugin extends DatabasePlugin {
         'out.port': options.port,
       },
     }, ctx)
-    const comment = this.injectDbmComment(span, ops.comment, service)
+    const comment = this.injectDbmComment(span, ops.comment, serviceResult.name)
     if (comment) {
       ops.comment = comment
     }

package/packages/datadog-plugin-mysql/src/index.js

@@ -33,7 +33,7 @@ class MySQLPlugin extends DatabasePlugin {
         [CLIENT_PORT_KEY]: ctx.conf.port,
       },
     }, ctx)
-    ctx.sql = this.injectDbmQuery(span, ctx.sql, service)
+    ctx.sql = this.injectDbmQuery(span, ctx.sql, service.name)
 
     return ctx.currentStore
   }

package/packages/datadog-plugin-next/src/index.js

@@ -3,7 +3,7 @@
 const ServerPlugin = require('../../dd-trace/src/plugins/server')
 const { storage } = require('../../datadog-core')
 const analyticsSampler = require('../../dd-trace/src/analytics_sampler')
-const { COMPONENT } = require('../../dd-trace/src/constants')
+const { COMPONENT, SVC_SRC_KEY } = require('../../dd-trace/src/constants')
 const web = require('../../dd-trace/src/plugins/util/web')
 
 const errorPages = new Set(['/404', '/500', '/_error', '/_not-found', '/_not-found/page'])
@@ -19,15 +19,21 @@ class NextPlugin extends ServerPlugin {
   bindStart ({ req, res }) {
     const store = storage('legacy').getStore()
     const childOf = store ? store.span : store
+    const { name: schemaServiceName, source: schemaServiceSource } = this.serviceName()
+    const serviceName = this.config.service || schemaServiceName
+    let serviceSource = this.config.service ? 'opt.plugin' : schemaServiceSource
+    if (!serviceName || serviceName === this.tracer._service) serviceSource = undefined
+
     const span = this.tracer.startSpan(this.operationName(), {
       childOf,
       tags: {
         [COMPONENT]: this.constructor.id,
-        'service.name': this.config.service || this.serviceName(),
+        'service.name': serviceName,
         'resource.name': req.method,
         'span.type': 'web',
         'span.kind': 'server',
         'http.method': req.method,
+        ...(serviceSource === undefined ? {} : { [SVC_SRC_KEY]: serviceSource }),
       },
       integrationName: this.constructor.id,
     })

package/packages/datadog-plugin-pg/src/index.js

@@ -32,7 +32,7 @@ class PGPlugin extends DatabasePlugin {
       span.setTag('db.stream', 1)
     }
 
-    query.__ddInjectableQuery = this.injectDbmQuery(span, query.text, service, !!query.name)
+    query.__ddInjectableQuery = this.injectDbmQuery(span, query.text, service.name, !!query.name)
 
     return ctx.currentStore
   }

package/packages/datadog-plugin-tedious/src/index.js

@@ -28,7 +28,7 @@ class TediousPlugin extends DatabasePlugin {
 
     // SQL Server includes comments when caching queries
     // For that reason we allow service mode but not full mode
-    ctx.sql = this.injectDbmQuery(span, ctx.queryOrProcedure, service, true)
+    ctx.sql = this.injectDbmQuery(span, ctx.queryOrProcedure, service.name, true)
     return ctx.currentStore
   }
 }

package/packages/datadog-plugin-ws/src/close.js

@@ -47,7 +47,7 @@ class WSClosePlugin extends TracingPlugin {
     }
 
     if (isPeerClose && traceWebsocketMessagesInheritSampling && traceWebsocketMessagesSeparateTraces) {
-      span.setTag('_dd.dm.service', spanTags['service.name'] || service)
+      span.setTag('_dd.dm.service', spanTags['service.name'] || service.name)
       span.setTag('_dd.dm.resource', spanTags['resource.name'] || `websocket ${path}`)
       span.setTag('_dd.dm.inherited', 1)
     }

package/packages/datadog-plugin-ws/src/receiver.js

@@ -48,7 +48,7 @@ class WSReceiverPlugin extends TracingPlugin {
     }, ctx)
 
     if (traceWebsocketMessagesInheritSampling && traceWebsocketMessagesSeparateTraces) {
-      span.setTag('_dd.dm.service', spanTags['service.name'] || service)
+      span.setTag('_dd.dm.service', spanTags['service.name'] || service.name)
       span.setTag('_dd.dm.resource', spanTags['resource.name'] || `websocket ${path}`)
       span.setTag('_dd.dm.inherited', 1)
     }

package/packages/dd-trace/src/aiguard/sdk.js

@@ -25,11 +25,12 @@ const appsecMetrics = telemetryMetrics.manager.namespace('appsec')
 const ALLOW = 'ALLOW'
 
 class AIGuardAbortError extends Error {
-  constructor (reason, tags, sds) {
+  constructor (reason, tags, tagProbs, sds) {
     super(reason)
     this.name = 'AIGuardAbortError'
     this.reason = reason
     this.tags = tags
+    this.tagProbabilities = tagProbs
     this.sds = sds || []
   }
 }
@@ -188,38 +189,37 @@ class AIGuard extends NoopAIGuard {
           `AI Guard service call failed, status ${response.status}`,
           { errors: response.body?.errors })
       }
-      let action, reason, tags, sdsFindings, blockingEnabled
-      try {
-        const attr = response.body.data.attributes
-        if (!attr.action) {
-          throw new Error('Action missing from response')
-        }
-        action = attr.action
-        reason = attr.reason
-        tags = attr.tags
-        sdsFindings = attr.sds_findings || []
-        blockingEnabled = attr.is_blocking_enabled ?? false
-      } catch (e) {
+      const attr = response.body?.data?.attributes
+      if (!attr?.action) {
         appsecMetrics.count(AI_GUARD_TELEMETRY_REQUESTS, { error: true }).inc(1)
-        throw new AIGuardClientError(`AI Guard service returned unexpected response : ${response.body}`, { cause: e })
+        throw new AIGuardClientError(`AI Guard service returned unexpected response : ${response.body}`)
+      }
+      const action = attr.action
+      const reason = attr.reason
+      const tags = attr.tags ?? []
+      if (tags.length > 0) {
+        metaStruct.attack_categories = tags
+      }
+      const sdsFindings = attr.sds_findings ?? []
+      if (sdsFindings.length > 0) {
+        metaStruct.sds = sdsFindings
+      }
+      const tagProbabilities = attr.tag_probs ?? {}
+      if (attr.tag_probs) {
+        metaStruct.tag_probs = tagProbabilities
       }
+      const blockingEnabled = attr.is_blocking_enabled ?? false
       const shouldBlock = block && blockingEnabled && action !== ALLOW
       appsecMetrics.count(AI_GUARD_TELEMETRY_REQUESTS, { action, error: false, block: shouldBlock }).inc(1)
       span.setTag(AI_GUARD_ACTION_TAG_KEY, action)
       if (reason) {
         span.setTag(AI_GUARD_REASON_TAG_KEY, reason)
       }
-      if (tags?.length > 0) {
-        metaStruct.attack_categories = tags
-      }
-      if (sdsFindings?.length > 0) {
-        metaStruct.sds = sdsFindings
-      }
       if (shouldBlock) {
         span.setTag(AI_GUARD_BLOCKED_TAG_KEY, 'true')
-        throw new AIGuardAbortError(reason, tags, sdsFindings)
+        throw new AIGuardAbortError(reason, tags, tagProbabilities, sdsFindings)
       }
-      return { action, reason, tags, sds: sdsFindings }
+      return { action, reason, tags, tagProbabilities, sds: sdsFindings }
     })
   }
 }

package/packages/dd-trace/src/appsec/blocked_templates.js

@@ -1,11 +1,12 @@
 /* eslint-disable @stylistic/max-len */
+/* eslint-disable @stylistic/quotes */
 'use strict'
 
-const html = '<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>You\'ve been blocked</title><style>a,body,div,html,span{margin:0;padding:0;border:0;font-size:100%;font:inherit;vertical-align:baseline}body{background:-webkit-radial-gradient(26% 19%,circle,#fff,#f4f7f9);background:radial-gradient(circle at 26% 19%,#fff,#f4f7f9);display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;-ms-flex-line-pack:center;align-content:center;width:100%;min-height:100vh;line-height:1;flex-direction:column}p{display:block}main{text-align:center;flex:1;display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;-ms-flex-line-pack:center;align-content:center;flex-direction:column}p{font-size:18px;line-height:normal;color:#646464;font-family:sans-serif;font-weight:400}a{color:#4842b7}footer{width:100%;text-align:center}footer p{font-size:16px}</style></head><body><main><p>Sorry, you cannot access this page. Please contact the customer service team.</p></main><footer><p>Security provided by <a href="https://www.datadoghq.com/product/security-platform/application-security-monitoring/" target="_blank">Datadog</a></p></footer></body></html>'
+const html = `<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>You've been blocked</title><style>a,body,div,html,span{margin:0;padding:0;border:0;font-size:100%;font:inherit;vertical-align:baseline}body{background:-webkit-radial-gradient(26% 19%,circle,#fff,#f4f7f9);background:radial-gradient(circle at 26% 19%,#fff,#f4f7f9);display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;-ms-flex-line-pack:center;align-content:center;width:100%;min-height:100vh;line-height:1;flex-direction:column}p{display:block}main{text-align:center;flex:1;display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;-ms-flex-line-pack:center;align-content:center;flex-direction:column}p{font-size:18px;line-height:normal;color:#646464;font-family:sans-serif;font-weight:400}a{color:#4842b7}footer{width:100%;text-align:center}footer p{font-size:16px}.security-response-id{font-size:14px;color:#999;margin-top:20px;font-family:monospace}</style></head><body><main><p>Sorry, you cannot access this page. Please contact the customer service team.</p><p class="security-response-id">Security Response ID: [security_response_id]</p></main><footer><p>Security provided by <a href="https://www.datadoghq.com/product/security-platform/application-security-monitoring/" target="_blank" rel="noopener noreferrer">Datadog</a></p></footer></body></html>`
 
-const json = '{"errors":[{"title":"You\'ve been blocked","detail":"Sorry, you cannot access this page. Please contact the customer service team. Security provided by Datadog."}]}'
+const json = `{"errors":[{"title":"You've been blocked","detail":"Sorry, you cannot access this page. Please contact the customer service team. Security provided by Datadog."}],"security_response_id":"[security_response_id]"}`
 
-const graphqlJson = '{"errors":[{"message":"You\'ve been blocked","extensions":{"detail":"Sorry, you cannot perform this operation. Please contact the customer service team. Security provided by Datadog."}}]}'
+const graphqlJson = `{"errors":[{"message":"You've been blocked","extensions":{"detail":"Sorry, you cannot perform this operation. Please contact the customer service team. Security provided by Datadog."}}],"security_response_id":"[security_response_id]"}`
 
 module.exports = {
   html,